Overview

overview

7

Static

static

3

3a201557c8...48.exe

windows7-x64

5

3a201557c8...48.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    3a201557c8143c7bd8ee1e38eb4a316f5210890e6bc4951dd39be12a9113d748

  • Size

    3.6MB

  • Sample

    231012-vn3tzadb41

  • MD5

    47eeaf206b37d7e0c8bc3a3e5d09f65f

  • SHA1

    eb1f220bc02c743ffeba15b72587b922d1615f60

  • SHA256

    3a201557c8143c7bd8ee1e38eb4a316f5210890e6bc4951dd39be12a9113d748

  • SHA512

    334ce438e722103e5e4581267eb29e073c3010bb617eb3cc9f7d83b629c527cdaf3a4b6ac7d3327faac624b6f4aa2811663b708be548858811f711abba8668d9

  • SSDEEP

    98304:FvknezenA9oS9mXIdRN3jh0vbbZNZO3NIPo/A:an6LCSDdv3jw1O3N3/A

Score
7/10

Malware Config

Targets

    • Target

      3a201557c8143c7bd8ee1e38eb4a316f5210890e6bc4951dd39be12a9113d748

    • Size

      3.6MB

    • MD5

      47eeaf206b37d7e0c8bc3a3e5d09f65f

    • SHA1

      eb1f220bc02c743ffeba15b72587b922d1615f60

    • SHA256

      3a201557c8143c7bd8ee1e38eb4a316f5210890e6bc4951dd39be12a9113d748

    • SHA512

      334ce438e722103e5e4581267eb29e073c3010bb617eb3cc9f7d83b629c527cdaf3a4b6ac7d3327faac624b6f4aa2811663b708be548858811f711abba8668d9

    • SSDEEP

      98304:FvknezenA9oS9mXIdRN3jh0vbbZNZO3NIPo/A:an6LCSDdv3jw1O3N3/A

    Score
    7/10

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks